Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3136372e38382e3134362e302f32342d3234203d3e2031323339.roa
File: 3136372e38382e3134362e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: Sf3ydmF7FvOY7OkRL3lRWv6ZgQANfsEdtljlFr6adYE=
Subject key identifier: F4:FB:2F:1B:B7:FB:A2:B0:D2:9F:EC:31:FD:39:D3:45:C5:40:A3:6A
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 2D0027A71895EC4D0863D6DCA46A407C969DB571
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3136372e38382e3134362e302f32342d3234203d3e2031323339.roa
Signing time: Mon 20 Mar 2023 15:50:46 +0000
ROA not before: Mon 20 Mar 2023 15:45:46 +0000
ROA not after: Mon 18 Mar 2024 15:50:46 +0000
asID: 1239
IP address blocks: 167.88.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:00:27:a7:18:95:ec:4d:08:63:d6:dc:a4:6a:40:7c:96:9d:b5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Mar 20 15:45:46 2023 GMT
Not After : Mar 18 15:50:46 2024 GMT
Subject: CN=F4FB2F1BB7FBA2B0D29FEC31FD39D345C540A36A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:98:56:e5:52:0e:93:78:ac:76:75:c4:59:97:
06:ec:8c:71:02:94:0d:d9:aa:ec:22:e0:d7:51:d1:
2e:1d:b2:a2:d1:c3:1c:bf:6e:7e:6a:bb:a1:d1:2b:
20:1d:70:b1:8c:b0:5b:2d:f3:35:20:7f:48:19:d4:
b2:5b:09:61:b0:68:ff:15:7b:ac:04:ef:d3:dc:25:
38:dc:e9:9c:e7:2f:bb:c4:e7:a6:98:2d:1e:31:cd:
53:9d:c1:ec:40:4d:01:0f:98:91:54:1e:8f:0f:62:
d5:6d:51:7f:e7:5d:8b:0f:44:15:55:fe:7e:a6:06:
43:d7:6a:75:e5:e5:33:30:4e:e0:93:73:20:2a:1c:
8a:fb:f4:1b:f4:bf:2d:87:9e:be:e8:7d:55:ed:ab:
36:4e:b4:f1:a5:35:17:96:bb:65:27:5d:76:0b:05:
f8:e6:c8:51:4c:57:d4:3a:97:5c:3d:74:28:fe:85:
33:7e:95:a8:68:aa:d5:99:9d:ad:13:ab:5a:35:ed:
b4:e9:b9:ed:b8:8e:47:20:80:98:3c:d6:2b:58:8f:
45:28:32:76:23:fe:d8:e6:18:5c:24:74:19:cd:13:
27:29:d4:0b:65:80:3c:43:16:00:00:49:f8:5e:d7:
66:66:29:13:43:3d:65:d0:ec:d1:ab:46:74:1b:5f:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FB:2F:1B:B7:FB:A2:B0:D2:9F:EC:31:FD:39:D3:45:C5:40:A3:6A
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3136372e38382e3134362e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4e:fd:e1:59:96:96:78:ac:b2:d9:73:43:fb:14:e3:82:e7:
5a:c0:3e:20:49:2a:fe:fd:32:90:77:9d:ff:eb:ec:f4:13:86:
cc:f9:52:15:d8:ad:b0:b7:1e:25:a4:d2:5b:b3:e3:49:88:28:
c8:05:75:c8:c9:d3:7d:fd:5f:22:15:b2:17:c5:70:f8:03:a1:
bc:83:57:f6:b5:fb:bc:73:a7:dc:3a:f6:b6:a5:26:e7:f5:2b:
20:44:0c:b1:ab:c6:7f:39:d3:d0:d1:8d:45:41:f3:47:74:64:
a0:2f:25:e6:55:ea:48:4d:1d:06:48:9f:ce:a5:9a:2f:40:8c:
35:e8:6a:a3:1e:9f:02:61:b3:91:24:a3:1b:ec:27:0c:ba:09:
12:a7:4d:6a:9d:b2:10:a2:fc:76:fb:42:10:b5:da:dc:05:af:
95:0b:7f:fe:ca:95:22:fc:dd:f0:3b:7f:5c:6c:f3:67:e2:35:
b3:e7:42:fe:0e:b8:26:aa:d2:40:d3:c3:f0:90:a1:2b:29:7a:
97:7d:20:3a:d7:60:09:13:e4:b4:17:65:92:d6:1a:af:59:50:
1a:b0:fc:42:d3:1a:b4:73:b2:5b:78:8a:74:f2:ca:9c:30:70:
97:cb:8a:e9:03:a0:28:f4:51:fd:f9:c1:e0:b9:8a:63:0d:8e:
9a:4b:89:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org